Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/3AHQL_pTKa728-rkkxHITCoJMSM.roa
File: 3AHQL_pTKa728-rkkxHITCoJMSM.roa (raw, json)
Hash identifier: M/PwxbFJ/3HX3TNsjjopcSlttvR8MumiEMNeI+p91jo=
Subject key identifier: DC:01:D0:2F:FA:53:29:AE:F6:F3:EA:E4:93:11:C8:4C:2A:09:31:23
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A14CEBF563C581C07595A17EAFB37DAA45
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/3AHQL_pTKa728-rkkxHITCoJMSM.roa
Signing time: Sun 18 Oct 2026 02:51:34 +0000
ROA not before: Sun 18 Oct 2026 02:51:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 153.52.64.0/24 maxlen: 24
153.52.78.0/24 maxlen: 24
153.52.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:eb:f5:63:c5:81:c0:75:95:a1:7e:af:b3:7d:aa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Oct 18 02:51:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc01d02ffa5329aef6f3eae49311c84c2a093123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:99:96:fd:fe:e9:38:98:04:97:7e:93:f4:
c7:92:16:9c:f2:cd:c5:fb:82:06:01:df:a2:b5:09:
40:59:ec:a6:44:91:e6:68:68:35:dd:5d:43:4f:17:
a7:e2:a1:60:08:f6:fc:77:8c:a7:74:d1:75:6f:8a:
2f:db:9e:7e:b9:3b:ba:b7:ca:71:5b:42:91:17:76:
48:db:ce:8a:1e:75:d4:5c:30:41:b3:d7:7a:f5:65:
c5:53:07:94:cd:bb:95:17:b3:fa:33:73:3e:d9:eb:
01:72:cb:10:e4:7d:b9:2b:84:e9:03:0c:61:38:d1:
50:e4:33:c5:72:6a:af:a0:50:bb:84:83:ee:b5:fb:
24:0c:90:b4:58:54:0a:84:82:d3:f9:f4:57:e4:59:
d9:14:20:86:a1:8f:72:b1:3c:5f:2c:67:bf:dd:e3:
e8:51:97:94:24:55:21:13:74:10:6f:f1:fa:18:f1:
6e:6c:41:a5:d1:92:5e:ba:71:fc:a3:fe:2b:00:da:
3d:3c:d0:63:df:4d:7e:7e:f8:07:f8:3c:5b:6a:62:
a4:7f:2d:bb:2f:c9:c6:9d:81:39:dd:dd:e6:31:22:
c9:11:52:b8:e1:39:14:78:05:a5:53:d0:91:0e:9f:
91:84:1a:d1:7e:4a:39:d5:4e:dd:cc:77:c9:1e:5f:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:D0:2F:FA:53:29:AE:F6:F3:EA:E4:93:11:C8:4C:2A:09:31:23
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/3AHQL_pTKa728-rkkxHITCoJMSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.64.0/24
153.52.78.0/24
153.52.83.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ce:0f:b4:da:53:69:50:6f:01:81:6a:ed:c6:d7:58:49:d0:
52:73:1b:8e:cd:25:4b:1b:e4:8d:58:bd:b9:bd:e2:0e:e0:01:
48:98:67:1d:6b:2d:d7:28:c0:26:25:5d:cd:f1:5d:a9:93:b2:
5b:06:5a:bb:e7:22:b1:27:c6:0d:1a:9c:9e:2a:2c:23:fa:cb:
40:e5:50:06:21:10:3e:b4:3d:b0:d3:78:64:84:b6:56:f4:e7:
e1:95:83:f3:fb:cb:d7:b7:0b:c9:9f:de:43:40:9d:94:f2:c4:
08:c7:1b:2f:b8:5e:c1:dd:5d:67:19:bd:0f:0b:fc:e1:91:9d:
bb:ca:c9:80:a8:1a:9c:db:66:cb:37:bf:8e:d5:26:fe:0e:99:
2b:ef:47:fb:61:c9:7f:b7:b0:d3:8b:bc:ac:20:22:ea:ec:5c:
89:f4:71:26:6f:38:1e:b2:0b:64:02:77:6e:99:95:87:83:27:
92:f7:54:de:cd:5f:6e:40:2c:97:1c:f7:b0:d6:4d:28:28:10:
39:3b:53:45:ca:82:4a:7b:da:06:8b:54:80:ab:80:18:de:f5:
9a:98:ad:5c:a6:97:b8:c8:c1:88:f1:af:f9:58:9b:43:6a:2b:
8a:aa:36:c7:e8:90:f5:e3:62:82:bb:5b:04:ad:ca:6c:f9:96:
7e:4a:60:8c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaFM6/VjxYHAdZWhfq+zfapFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjM5ZmI5YWYxMjg0MjhmODRmZWQ5ZjM1ODY4NjcxN2Vk
OTc2MDEwHhcNMjYxMDE4MDI1MTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzAxZDAyZmZhNTMyOWFlZjZmM2VhZTQ5MzExYzg0YzJhMDkzMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcKZlv3+6TiYBJd+k/THkhac8s3F
+4IGAd+itQlAWeymRJHmaGg13V1DTxen4qFgCPb8d4yndNF1b4ov255+uTu6t8px
W0KRF3ZI286KHnXUXDBBs9d69WXFUweUzbuVF7P6M3M+2esBcssQ5H25K4TpAwxh
ONFQ5DPFcmqvoFC7hIPutfskDJC0WFQKhILT+fRX5FnZFCCGoY9ysTxfLGe/3ePo
UZeUJFUhE3QQb/H6GPFubEGl0ZJeunH8o/4rANo9PNBj301+fvgH+DxbamKkfy27
L8nGnYE53d3mMSLJEVK44TkUeAWlU9CRDp+RhBrRfko51U7dzHfJHl8RmwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNwB0C/6Uymu9vPq5JMRyEwqCTEjMB8GA1UdIwQY
MBaAFEIjn7mvEoQo+E/tnzWGhnF+2XYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2Mt
YmM1NDAzYWMyYTk1LzEvM0FIUUxfcFRLYTcyOC1ya2t4SElUQ29KTVNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZTNkNDAtMmFlNC00M2YzLWFlN2MtYmM1NDAzYWMyYTk1
LzEvUWlPZnVhOFNoQ2o0VC0yZk5ZYUdjWDdaZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmTRAAwQA
mTROAwQAmTRTMA0GCSqGSIb3DQEBCwUAA4IBAQA0zg+02lNpUG8BgWrtxtdYSdBS
cxuOzSVLG+SNWL25veIO4AFImGcday3XKMAmJV3N8V2pk7JbBlq75yKxJ8YNGpye
Kiwj+stA5VAGIRA+tD2w03hkhLZW9OfhlYPz+8vXtwvJn95DQJ2U8sQIxxsvuF7B
3V1nGb0PC/zhkZ27ysmAqBqc22bLN7+O1Sb+Dpkr70f7Ycl/t7DTi7ysICLq7FyJ
9HEmbzgesgtkAndumZWHgyeS91TezV9uQCyXHPew1k0oKBA5O1NFyoJKe9oGi1SA
q4AY3vWamK1cppe4yMGI8a/5WJtDaiuKqjbH6JD142KCu1sErcps+ZZ+SmCM
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:31:49 2026 by rpki-client